Linux Kernel nilfs2 Buffer Reuse Warning and Panic Vulnerability

Vulnerability

A vulnerability in the Linux kernel's nilfs2 file system has been addressed, which could lead to a kernel warning and a panic under certain conditions. This issue arises from nilfs2's practice of reusing buffer pointers for metadata, which can be discarded in critical situations. The vulnerability was reported after a commit that changed how dirty data is handled, but it may have existed before. The problem can occur when the kernel is booted with 'panic_on_warn', as a stress test with a corrupted disk image revealed.

Impact

The vulnerability can cause a kernel warning and a panic, disrupting system operations.

Reproduction

The vulnerability can be reproduced by using a corrupted disk image with a syzbot stress test. This will trigger the 'mark_buffer_dirty' function, leading to the kernel warning and panic if the 'panic_on_warn' option is enabled.

Remediation

Users can update to the latest version of the Linux kernel where this vulnerability has been fixed.

Added: Dec 24, 2025, 2:53 PM
Updated: Dec 24, 2025, 2:53 PM

Vulnerability Rating

Custom Algorithm
spread
9.0
impact
2.5
exploitability
4.3
remediation
7.7
relevance
1.7
threat
4.8
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.